feat: line/column on findings + report() and --report (v0.2.0)

Every Finding now carries line + column (1-based; column in code points), so
you can jump straight to an offending character in a large file.

Add report(text): pairs each finding with its full source line. Add the CLI
--report / -R mode: a compiler-style diagnostic printing file:line:col, severity,
the source line with the invisible char revealed, and a caret pointing at it —
ideal for catching Trojan Source bidi attacks in review. --scan now shows
line:col with colored severity; --version reads the real package version.

26 tests (was 21). resolveJsonModule enabled for the version import.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

chore(release): 0.1.1 — Lemon Squeezy-only sponsorship (docs)

feat: initial release of unspook — reveal & remove invisible/dangerou…

…s/confusable characters